What is Asfaload

Asfaload proposes a solution preventing malware spreading unknowingly, letting publisher register the authenticity of a published file, and letting downloaders check the file was validated by the publisher as genuine.

Publisher workflow

Files are published as usual, but additionally the publisher uses the asfaload tool to share the files’ fingerprints. The fingerprints are available to downloaders only after the publisher validates the publication of the file’s fingerprint via a web interface or a mobile phone app also provider by Asfaload. By using a dedicated channel for validation, malevolent actors placing or replacing files in a published location still cannot validate the files’ fingerprints. For heightened security, it is possible to require validation by multiple parties.

Downloader workflow

Download the file with the asfaload tool, and it will transparently check if the file’s fingerprint was validated by the publisher.